← Back to Ransomware Chk

Aurora

Active
Aurora is a ransomware group associated with a multi-purpose Go-based malware distributed by multiple criminal teams from mid-2022, also sold as an infostealer/botnet under the same name on underground forums.
7 Victims
Apr 29, 2026 First Discovered
Apr 29, 2026 Last Discovered
4 Days Inactive
0% Infostealer
1/1 Sites Online
Top Countries
US 4
CA 1
GB 1
MV 1
Top Sectors
Business Services 2
Manufacturing 1
Financial Services 1
Consumer Services 1
Hospitality and Tourism 1
Healthcare 1
Known Locations (1)
Aur0ra Blog
u6lieui2dakbctcjea2bz4r4q32r7t36nwljovqbv7mxs6o2smgxixid.onion
Victims (7)
Atlas Metal Industries Inc
CA Manufacturing Discovered: Apr 29, 2026 · Attack est.: Apr 28, 2026
[food, metal] Atlas Metal Industries Inc. — a privately held commercial-foodservice-equipment manufacturer headquartered in Miami, Florida. The dataset is a complete Microsoft Dynamics GP environment: production databases, payroll records, system...
Costa Solutions, LLC
US Business Services Discovered: Apr 29, 2026 · Attack est.: Apr 28, 2026
[warehouse] Costa Solutions, LLC — a privately held managed-labor and warehousing company headquartered in San Antonio, Texas, with ~$140M annual revenue and 200–1,000 employees. The file server contained the complete...
Bayou Title, Inc.
US Financial Services Discovered: Apr 29, 2026 · Attack est.: Apr 28, 2026
[insurance] Bayou Title, Inc. — the largest title insurance agent and closing/settlement services provider in Louisiana, with 19 full-service locations statewide. The exfiltrated data spans 20+ years of operations (2004–2026)...
Law Offices of Michael A. Freedman, P.A. (maflaw.com)
US Business Services Discovered: Apr 29, 2026 · Attack est.: Apr 22, 2026
[law] Law Offices of Michael A. Freedman, P.A. (maflaw.com). The exfiltrated corpus is 579 GB used / 143 GB at root level / 196,701 files / 19,231 directories, dated as...
Baresque Group
GB Consumer Services Discovered: Apr 29, 2026 · Attack est.: Apr 21, 2026
[design] Baresque Group — a respected commercial-interiors company headquartered in Perth, Australia, with offices in Dallas, Chicago, and Brussels. The exposed material includes: 100+ passport scans, 35 birth certificates, 60+...
Cheval Blanc Randheli
MV Hospitality and Tourism Discovered: Apr 29, 2026 · Attack est.: Apr 21, 2026
[lvmh] Guest Passport Scans — 75,855 Files, 10 Years The single largest data category: 75,855 passport scan images spanning January 2015 through October 2024, organised in daily folders within monthly...
Advanta Genetics LLC
US Healthcare Discovered: Apr 29, 2026 · Attack est.: Apr 16, 2026
[health] Advanta Genetics LLC — a respected CLIA/CAP-accredited clinical toxicology and molecular diagnostics laborator. The exposed material includes: Tens of thousands of real patient lives — including highly sensitive chronic...